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INTRODUCTION 


The safe-life and damage-tolerant design approaches presented herein 
apply to both metallic and fibrous composite helicopter structures. 
However, to maintain the theme of this workshop, this presentation will 
emphasize the application of these design approaches to fibrous compos- 
ite structures. 

In the current generation of Army helicopters, such as the UH-60 
Black Hawk shown in Figure 1, composite materials make up as high as 17 
percent of the airframe and rotor weight. With the advent of major 
helicopter composite structures R&D projects, such as the Advanced 
Composite Airframe Program (ACAP) , and Manufacturing Methods and Tech- 
nology (MM&T) projects, such as UH-60 Low Cost Composite Blade Program, 
it is estimated that within a few years composite materials could be 
applied to as much as 80% of the airframe and rotor weight of a heli- 
copter in a production program. Along with this application is the 
essential requirement that sound, definitive design criteria be developed 
in order that the composite structures possess high fatigue lives for 
economy of ownership and good damage tolerance for flight safety. 

Safe-life and damage-tolerant criteria are applied to all helicopter 
flight critical components, which are generally categorized as follows: 

Dynamic components - main and tail rotor system, which includes 
blades, hub and rotating controls, and drive train which includes trans- 
mission, and main and interconnecting rotor shafts. 

Airframe - fuselage, aerodynamic surfaces and landing gear. 



Figure 1 
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TYPICAL STRESS SPECTRA FOR A HELICOPTER BLADE 
ROOT END AND TRANSPORT AIRPLANE ROOT END 

The dynamic components previously described tend to be fatigue 
critical. Although fatigue problems have been known to occur within 
the helicopter airframe, it for the most part is designed by strength 
and minimum gage. 

Figure 2 shows a typical comparison of the stress history for a tirans 
port helicopter blade root end and that for a typical commercial trans- 
port wing root. The helicopter dynamic components tend to be loaded at 
frequencies that are a multiple of rotor speed - typically 2 to 20 Hz. 
This loading rate represents 7 million to 70 million cycles per 1000 
operating hours. Thus these components experience a much higher fre- 
quency of cyclic loading but with a narrower spread of the loading than 
the fixed wing aircraft component. 
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SAFE EIPB PHILOSOPHY 


The safe-life design approach is stated in Figure 3. It applies to 
statistically predictable failures which are those occurring from the 
random combination of fatigue strength and applied fatigue loads. 


ALL FATIGUE CRITIUL COMPONENTS OF 
THE HELICOPTER ARE DESIGNED TO A 
SPECIFIC SERVICE UFE, IN OPERATIONAL 
HOURS, AND ARE REMOVED FROM SERVICE 
AT OR BEFORE THIS ELAPSED TIME SO 
THAT THE PROBABILITY OF A FATIGUE 
FAILURE IS REMOTE 


Figure 3 



SAFE -LIFE METHODOLOGY 


The methodology for the fatigue design of primary structural com- 
ponents is schematically outlined in Figure 4. The three basic elements 
of safe-life design include; 

- Working Fatigue S-N Curve - developed based upon coupon tests to 
determine curve shapes, full-scale specimen tests to provide data points 
for constructing a mean curve, and then a statistical reduction of the 
mean curve to a "working" curve upon which the damage calculations are 
based. A minimum of six full-scale test specimens are generally 
required to establish the mean curve. The statistical reduction is made 
on the stress (and not cycles) for it is the high cycles region of the 
S-N curve at which fatigue loading occurs. 

- Design Loading Spectra - developed from the mission profile 
which is a prediction of how the aircraft shall be used, and the flight 
loads which are developed for the various maneuvers and flight condi- 
tions of the helicopter's mission profile. Obviously in the development 
of a new helicopter system, these loads must initially be either pre- 
dicted or empirically derived from measured loads on similar helicopters. 

- Cumulative Damage Theory - the combination of loads and fatigue 
strength by means of a cumulative damage theory results in the component 
fatigue life. 

The safe-life methodology outlined herein typifies that used by most 
US and European helicopter manufacturers (references 1 through 3) 
although specific approaches for analysis of the loads and the material 
fatigue data vary with the manufacturers. 

For the UH-60 Black Hawk and the YAH-64 Apache, the Army's more 
recent helicopter development programs, the minimum required fatigue 
life for all dynamic components has been 5,000 and 4,500 flight hours, 
respectively. Many of the components on these aircraft have exceeded 
their minimum fatigue life requirement. 



Figure 4 
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FAILURE RATE VS FLIGHT HOURS 

The safe -life design approach, when properly executed, places 
statistically predictable failures at an extremely remote probability 
of occurrence. This approach does, however, assume the structure to 
be flaw free. Over the years operational experience has shown (refer- 
ences 4 through 6) that the safe -life approach by itself is not adequate 
because of unpredictable failures resulting from such sources as manu- 
facturing defects and service -induced damage (see Figure 5) . Further- 
more, review of this operational experience has shown these unpredictable 
failures to far outnumber the predictable ones. 



HOURS 


Figure 5 
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DAMAGE SOURCES 


The statistically nonpredictable failures discussed in the previous 
figure result from one of three categories of damage - initial, as 
originating from material defects or manufacturing-induced anomalies, 
service- induced or ballistic. Examples for each of the damages are 
presented in Figure 6. Ballistic damage is certainly an in-service 
occurrence; however, because of the extreme nature of this damage and 
its associated short residual life requirement (30 minutes to roughly 
5 hours) , is generally addressed separately from the other damage types, 
and shall not be discussed herein. 


• DESIGN ERRORS 

• MATERIAL-AND MANUFACTURING-INDUCED DEFECTS 

- IMPROPER LAYUP 

- INCORRECT/INCOMPLETE CURING 

- MACHINING ERRORS 

- HANOLING/ASSEMBLING AREAS 

• SERVICE INDUCED DAMAGE 

- FOREIGN OBJECT DAMAGE |F00| 

- MAINTENANCE ERRORS 

- GROUND HANDLING 

• BALLISTIC DAMAGE 

- SMALL ARMS PROJECTILES 17.62mm fc 12.7mm| 

- HIGH EXPLOSIVE INCINDIARY |23mm HEI-T| 


Figure 6 
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EARLY DAMAGE TOLERANCE REQUIREMENTS 


Although damage tolerance as we know it today is a relatively new 
technology, its importance was recognized as long as four centuries ago. 
Near the end of the fifteenth century, technical notes were written on 
what must have been one of the first requirements for damage -tolerant 
design. They were in the notebook of Leonardo da Vinci in which he 
discussed the physics of flight and the design of "flying machines," and 
are shown in Figure 7 (reference 7) . 

In the early 60 's a fail-safe design philosophy began to evolve 
within the rotory wing industry and has been used in numerous applica- 
tions for both metallic and fibrous composite structures (references 8 
through 10). The safeguard in the fail-safe approach is that damage, 
induced or fatigue, will be detected by inspection procedures before it 
grows to such an extent that the residual strength of the structure is 
reduced below a safe level. 

In the early 70 's a third design philosophy - damage tolerance - 
began to evolve. It is similar' to the fail-safe approach but further 
considers the growth of damage resulting during manufacture or service 
usage. Therefore, fundamental to the damage-tolerant approach is an 
understanding of structural performance in the presence of defects or 
damage. 


"IN CONSTRUCTING WINGS ONE SHOULD MAKE ONE CORD TO BEAR THE 
STRAIN AND A LOOSER ONE IN THE SAME POSITION SO THAT IF ONE 
BREAKS UNDER STRAIN THE OTHER IS IN POSITION TO SERVE THE SAME 
FUNCTION".' 


FROM UONAIDO DA VINCI'S NOTtlOOK 
ON DfSIGN OF "FLYING MACHINES' 

15TH CEHTUIY 


Figure 7 
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DAMAGE TOLERANCE PHILOSOPHY 

Damage tolerance is a safety requirement and equates to the fail- 
safe design approach employed for flight critical components by the 
rotary wing industry since the early 60 's. Damage tolerance is the 
ability of the structure to resist failure due to the presence of 
defects, cracks, or other dcimage for a time period sufficient to enable 
their detection. 

The essential elements of dcimage tolerance are presented in 
Figure 8. In designing to this philosophy, the criteria must address 
both the static residual strength and damage propagation for the 
structure under consideration. 

The fail-safe and damage tolerance design philosophies each have 
the common objective of providing structural integrity at a reasonable 
level of assurance for all safety-of-f light structures, that is struc- 
ture whose failure could cause direct loss of the aircraft. Reference 
5 points out an important distinction between fail safety and damage 
tolerance. Fail safety as it was defined prior to the evolution of 
damage tolerance is based upon the premise that one cannot be certain 
that cracks (or damage) will not initiate at some time during the air- 
craft life and these cracks must be detected before the strength drops 
below a certain level. Damage tolerance, on the other hand, assumes 
the existence of initial flaws in the structure and the structure is 
designed to retain adequate residual strength until damage is detected 
and corrective actions taken. 

Although the damage-tolerant approach has begun to see a more wide- 
spread usage within the Army, there is still considerable work to 
be accomplished in developing specific requirements and procedures for 
this design approach. 


The basic philosophy of damage tolerant design is 
based upon: 

• THE ACCEPTANCE THAT DAMAGE WILL OCCUR 

• AN ADEQUATE SYSTEM OF INSPECTION SO THE 

DAMAGE MAY BE DETECTED 

• AN ADEQUATE STRENGTH MAINTAINED IN THE 

DAMAGED STRUCTURE 


Figure 8 
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RESIDUAL STRENGTH AND DAMAGE GROWTH 

The dcimage- tolerant requirement, which is illustrated schematically 
in Figure 9 , addresses both the residual strength and the damage 
propagation for the structure under consideration. 

The residual strength is the amount of static strength available at 
any time during the service exposure with damage present. Safety is 
ensured by designing to requirements wherein damage is never allowed to 
grow and reduce the residual static strength of the structure below a 
specified value, such as that corresponding to the maximum load to be 
experienced in service. 

The damage growth curve presents damage size as a function of time. 
The period of time required for damage to grow from a minimum detect- 
able size, such as by in-service inspection, to a critical size is the 
detection period. The critical size generally corresponds to the maxi- 
mum service load residual strength, although for composites this value 
could be dictated by stiffness loss to a critical value. 




KESIDUAL STtENGTH 


DAMAGE GROWTH 


Figure 9 



DAMAGE TOLERANCE APPROACHES 


Damage tolerance may be achieved in one of two different methods as 
shown in Figure 10. In fail-safe structures, damage tolerance (and 
their safety) is assured by the allowance of partial structural failure, 
the ability to detect this failure prior to total loss of the structure, 
the ability to operate safely with the partial failure prior to inspec- 
tion and the maintenance of specified static strength throughout the 
period. Fail-safe structures are usually comprised of multiple elements 
or load paths such that damage can be safely contained by failing a load 
path or by arresting a rapidly running crack. In safe crack growth 
structures, damage tolerance is achieved by sizing the structure, using 
fracture mechanics or empirical data, such that initial damage will grow 
at a stable, slow rate and not achieve a size large enough to fail the 
structure prior to detection. A special case within this category is 
nonpropagating- defect structures wherein the structure is designed to 
sufficiently low stress levels for virtually no propagation of the 
largest defect that would not be detected during a production inspection 
or that could be incurred in service. 



Figure 10 
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SAFE- LIFE AND DAMAGE TOLERANCE REQUIREMENTS FOR ARMY HELICOPTERC 

The structural design specification for helicopter MIL-S-8698 
imposes requirements for safe-life fatigue design of flight critical 
structures but not for fail-safe or damage tolerance design (Figure 11). 
In the more recent major helicopter system procurements, the Army has 
required fail safety or damage tolerance for the helicopter primary 
structure. These requirements have been stated in general terms as 
follows ; 

"The primary structure shall incorporate materials, stress levels, 
and structural configurations that will minimize the probability of loss 
of the aircraft due to damage of a single structural element (including 
control system or dynamic components) , or due to propagation of unde- 
tected flaws, cracks, or other damage. Slow crack growth, crack 
arrestment, alternate load paths and systems, and other available design 
principles shall be used to achieve this capability. " 

Because of the general nature of these requirements, they were 
successfully applied to both metallic and fibrous composite structures 
(reference 11). It has been left up to the helicopter manufacturer to 
define the specifics such as damage or flaw sizes, inspection intervals, 
etc., subject, of course, to Government approval. 


• MIL-S-8698, STRUCTURAL DESIGN REQUIREMENTS, HELICOPTERS 

- SAFE LIFE DESIGN REQUIREMENTS 

- NO FAIL SAFE/DAMAGE TOLERANCE DESIGN REQUIREMENTS 

• SYSTEM DEVELOPMENT SPECIFICATIONS (UH-60, YAH-64) 

- FAIL SAFE/DAMAGE TOLERANCE DESIGN REQTS 
■ REQUIREMENTS ARE GENERAL 

- TAILORED TO METALLIC STRUCTURES 

Figure 11 
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COMPOSITE MAIN ROTOR BLADES 


The Army's work in composite main rotor blades has spanned well 
over a decade. Composite blades are either in production or at various 
stages of planned implementation for nearly all inventory helicopters. 

Four composite blade designs are shown in Figures 12 through 15, 
and although they were each developed by a different helicopter manu- 
facturer, there is a certain degree of commonality in the fail-safe and 
damage-tolerant structural design approaches. Two blades are in pro- 
duction - the CH-47D blade (Figure 12) manufactured by Boeing Vertol and 
the K-747 blade (Figure 13) manufactured by Kaman Aerospace. The Hughes 
Helicopters AH-64 composite blade (Figure 14) and the Sikorsky UH-60 
composite blade (Figure 15) are currently under manufacturing develop- 
ment in MM&T programs and are planned for future production implementa- 
tion. 

All blades are of damage-tolerant, high fracture toughness mate- 
rials - either fiberglass or Kevlar. The UH-60 blade spar will be 
approximately 50% graphite; this is necessitated by the desire to main- 
tain the same 9^5% blade airfoil thickness as the titanium spar blade 
that it is to replace, and at the same time to match flap, torsion, and 
chord stiffnesses. To accomplish this with fiberglass would necessi- 
tate increasing the inboard airfoil thickness to 14.5%. 



Figure 12 
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K-747 COMPOSITE BLADE 



$PAI ATTACHMIHT DIIAIl fUU SFAN S CLASS 
STIAr WOUND AlOUND AlUMtNUIII flTTIHG 


CAST iroxv WEDGiS 



IIP WEIGHT • IIASS 
LEADING EDGE ElOSION GUAND* 
THEIMOPLASTtC POIYUIETHANI 
TIP CAP 



NOMEX HONEYCOMI 
jCOIE 

MUIT1>CEU mAMENT WOUND 
S GIASS/EPOXY SPAt 

fILAMENT WOUND XmAt/EPOXY 
TIAIUNG EDGE MCMIEt OIIGiN 


EllAMENT WOUND ^ AS” 
GLASS/ EPOXY SKINS 
(TOP A lOTTOM) 


Figure 13 


YAH-64 COMPOSITE MAIN ROTOR BLADE 


AHPOIl SICTIOW 



Figure 14 



COMPOSITE MAIN ROTOR BLADES (CONTINUED) 

All blades have a redundant load path root end except for the CH-47D 
blade; its single lug root end configuration was dictated by hub 
interface requirements. Hence fail safety in the root end has generally 
been achieved through redundancy. 

For the constant airfoil section, damage tolerance is achieved with 
the material selection and relatively low design operating strain 
levels, typically 1500 yin. /in. to 1800 yin. /in. 

Two of the blade concepts - the K-747 and AH-64 - also contain 
structural redundancy of the spar in the airfoil region through a 
multi-tubular (or cell) concept; this is to a large degree for ballistic 
tolerance. 

In general, the damage tolerance of these blades was developed and 
demonstrated through subcomponent and full-scale testing. Analysis was 
generally by classical techniques, with fail safety or damage tolerance 
assessed by assiiming loss of a certain portion of the structure. 


UH-60 COMPOSITE MAIN ROTOR BLADE 


AKFOIl SICIIOM 



SiMPtriEDSHEATH 


A 


ROOT END 


ROTOR DIAMETER = SS’I” 

RUDE CHORD = 21" 

RUDE WEI6HT = 211 LRS 
MANUFACTURINC RROCESS: WET FIIAMENT 
WINDIN6/C0CURIN6 


BUNDCD HBfcBGlASS lAMINAIE 



Figure 15 
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COMPOSITE ROTOR BLADE DAMAGE TOLERANCE DEMONSTRATED BY HLH ROOT END TEST 


Some of the early R&D emphasis on composite blades centered on the 
root end, for the success of composite applications to the rotor blade 
hinged to a large degree on the development of a root end that was 
structurally efficient, fail safe, and at the same time producible. 
Results from damage tolerance testing on the root end of the HLH blade 
which was fiberglass construction and weighed 780 lbs are summarized 
in Figure 16. After testing this specimen for 490 hours to demonstrate 
safe life, the specimen was damaged to varying degrees, from severing 
one of the four root end lugs to removing a 6" x 12" section, and again 
tested as shown in the figure to demonstrate its fail-safe properties. 
At the cutout section the axial, flap, and chord stiffness were reduced 
by approximately 50 percent, and torsion was reduced by 85 percent. 



• UNDAMAGED AFTER 

240 HOURS AT 100% OF DESIGN LOADS 
250 HOURS AT 300% OF DESIGN LOADS 


• SUCCESSFULLY WITHST.OOO 100% OF DESIGN LOADS 
40 HOURS WITH LUG CUT 

130 HOURS WITH LUG CUT AND FORWARD UPPER STRAPS SLOTTED (1/8 IN. SPANWISE BY 6 IN. CHORDWISE) AND THEN 
SUSTAINED LIMIT LOAD WITH NO DAMAGE PROPAGATION 
30 HOURS WITH LUG CUT AND FORWARD UPPER AND LOWER STRAPS CUT (12 IN. SPANWISE BY 6 IN. CHORDWISE) 


Figure 16 
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COMPOSITE ROTOR BLADE DAMAGE TOLERANCE 
DEMONSTRATED BY UTTAS ROOT END TEST 

Investigations have shown that initial deterioration of composites 
under repeated loading is manifested in a gradual loss of stiffness 
which is attributable initially to failure or breakdown within the 
resin. This factor, combined with another important feature that this 
loss in stiffness can occur, depending upon the stress level, many 
thousand cycles before static failure, yields the possiblity of inherent 
damage tolerance for many composite structures. 

This detection method of stiffness loss has been demonstrated in 
full-scale fatigue testing of fiberglass rotor blades. Reference 8 
reports that during fail- safe testing of the Boeing Vertol UTTAS rotor 
blade root end, which was fiberglass/epoxy construction, there was a 
noticeable decrease in torsional stiffness after approximately 2 x 10® 
cycles at elevated test loads. This testing is summarized in Figure 17. 
Although the blade still retained its full structural integrity, the 
change in stiffness was deemed a failure. The loads were dropped to high- 
speed level-flight values and the equivalent of 30 flight hours was run, 
with no further measured degradation. Test loads were then increased 
to the original high level and testing continued until blade deflec- 
tions exceeded machine capability. Even here there was no structural 
failure. Dynamic analyses, based upon reduced stiffness values, showed 
that the vibrational levels would have risen to a level noticeable to 
the pilot, but would still have been within a safe operating range. 
Additionally, regions of surface delamination became visible along with 
the stiffness loss. A key issue that must be addressed with this detec- 
tion procedure is tying the indication, such as increased vibration 
level, to the correct source. 



RATIO: 

DEFLECTION TO 
INITIAL DEFLECTION 


1 8g LOAD (277% DESIGN TORQUE) 


ONE MILLION CYCLES AT - 
100% DESIGN LOAD 


Figure 17 
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UH-60 COMPOSITE TAIL ROTOR SPAR 


The UH-60 composite tail rotor spar provides a good example of the 
need for damage tolerance criteria for composites . This component is 
in production on the UH-60. It is graphite/ epoxy and is highly complex 
in configuration, being made up of more than 300 individual detailed 
plies in order to satisfy strength and stiffness distribution require- 
ments. Because of this complexity and the manufacturing process used, 
the rejection rate of this component during early production was quite 
high. Because the effect of manufacturing defects (See Figure 18) had 
not been quantified for this component, the acceptance criteria was 
stringent. 

Three steps were taken to reduce this unacceptably high rejection 
rate: 

1. Alternate layup 

2. Press grade graphite 

3. Inspection and acceptance criteria 

Out of the three corrective steps, implementation of improved 
inspection techniques and an improved acceptance criterion, based upon 
actual testing of specimens with known defects (voids, porosity and 
inclusions) , had the most significant impact in significantly lowering 
the rejection rate. 


QUAL TEST SPEC #3 



Figure 18 
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UH-60 COMPOSITE TAIL ROTOR SPAR FATIGUE TEST 


Fatigue testing of a tail rotor spar is shown in Figure 20. 



Figure 20 
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UH-60 COMPOSITE TAIL ROTOR SPAR FATIGUE TEST RESULTS 

Figure 21 shows that spars with various defects fell within 
the scatter of spars that were void-free; this enabled establishment 
of a new acceptance criteria. 



Figure 21 


SUMMARY/CONCI.US IONS 


Helicopter flight- critical structures, although limited primarily 
to rotor blades, have been successfully designed for damage tolerance. 
This has been accomplished through redundancy, use of damage “tolerant 
materials and sizing to low operating stress levels. Design and 
demonstration have been based on laboratory testing. 

The increased application of composites to more complexly loaded 
structures, such as bearingless rotor hubs which inherently will operate 
at higher strain levels, further amplifies the need for a sound damage - 
tolerant criterion. Development of the criterion must address those 
items listed in the last bullet of Figure 22. 


0 LABORATORY TESTING THE BASIS FOR DESIGN AND DEVELOPHENT OF DAMAGE 
TOLERANT COMPOSITE STRUQURES 

0 DAMAGE TOLERANT CRITERIA FOR COMPOSITES NEEDED, ESPECIALLY IN 
LIGHT OF 

- COMPOSITES APPLICATION TO MORE COMPLEXLY LOADED COMPONENTS 

- INCREASED STRAIN LEVELS 

0 DAMAGE TOLERANT CRITERIA DEVELOPHENT MUST INCLUDE 

- PREDiaiVE CAPABILITY 

- DAMAGE SIZE REQUIREMENTS 

- NDT CAPABILITY/DAMAGE DETECTABILITY 

- DESIGN REQUIREMENTS 

- ENVIRONMENTAL EFFEQS 

- TEST/QUAL REQUIREMENTS 


Figure 22 
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